Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/r9UlUubL49TG-dRYniUxysc1-iw.roa
File: r9UlUubL49TG-dRYniUxysc1-iw.roa (raw, json)
Hash identifier: V3yjZIJlTdcRcyAoH/4W91bcBU/Pz6svwTCHKcyGzE0=
Subject key identifier: AF:D5:25:52:E6:CB:E3:D4:C6:F9:D4:58:9E:25:31:CA:C7:35:FA:2C
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 0187A28116B2A6BA16231C563384C2387AB9
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/r9UlUubL49TG-dRYniUxysc1-iw.roa
Signing time: Fri 21 Apr 2023 06:29:41 +0000
ROA not before: Fri 21 Apr 2023 06:29:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139659
IP address blocks: 45.145.228.0/24 maxlen: 24
45.145.228.0/23 maxlen: 23
45.145.229.0/24 maxlen: 24
45.152.64.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:81:16:b2:a6:ba:16:23:1c:56:33:84:c2:38:7a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Apr 21 06:29:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afd52552e6cbe3d4c6f9d4589e2531cac735fa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:d1:48:93:d4:37:0b:4a:1e:99:04:5f:72:
65:45:e0:9f:61:34:64:37:48:6b:b0:de:a8:e0:c2:
c4:f6:ec:33:fe:1f:53:35:72:ec:b8:27:83:27:aa:
53:c6:e1:16:27:da:0b:07:83:03:de:a3:96:a8:ff:
9e:e4:96:b4:25:2b:df:4f:2b:3f:96:06:da:f9:23:
ae:fd:96:f3:de:30:fd:6f:ea:95:4a:f6:b8:b0:7e:
64:31:51:07:f2:ea:5b:ab:b3:a8:98:64:59:f3:61:
3d:b0:31:77:98:b9:23:5a:83:74:51:23:b5:dc:d9:
5f:a6:cc:e4:9e:3d:c5:34:21:1e:37:47:b7:0d:04:
99:b4:f1:45:f2:97:96:5e:9c:95:af:a4:00:6b:45:
d1:c2:d1:2a:ac:08:79:5e:94:24:18:47:d5:3e:33:
90:50:0e:84:15:be:bf:28:13:3a:a5:9b:c4:7e:bf:
09:bf:36:04:d8:3b:a2:d2:73:f6:3c:bf:e4:7f:a8:
3e:e1:ef:d0:bc:de:82:b6:71:a9:9c:a6:93:c2:75:
f9:e1:85:71:b8:5d:c9:5b:b8:08:0e:fb:cb:6d:b8:
fe:fa:2c:6f:03:d3:f8:01:2d:d2:78:58:5e:a1:24:
36:94:24:8c:c7:f1:14:52:5d:f0:61:9a:90:41:c1:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D5:25:52:E6:CB:E3:D4:C6:F9:D4:58:9E:25:31:CA:C7:35:FA:2C
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/r9UlUubL49TG-dRYniUxysc1-iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.228.0/23
45.152.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:d4:1b:a8:08:b9:b5:9d:58:d6:4d:40:31:25:7a:59:39:ee:
64:9c:d7:a7:74:2f:0e:c9:b9:94:fd:f5:09:9d:1b:98:a4:56:
3a:be:30:38:9f:74:04:e8:2c:be:f7:b3:8b:7b:f0:c8:8c:54:
67:f7:b8:3c:1b:36:e4:e2:9b:34:5a:31:9f:65:bd:65:15:f8:
f1:ef:82:2e:96:1c:91:b5:2b:61:3e:39:5f:17:e4:c5:30:e6:
56:58:14:6a:54:4a:b1:fc:85:96:0e:68:bb:7a:5e:ce:ac:a9:
09:1f:66:d6:67:41:47:6e:23:80:33:13:63:e7:40:1e:52:b2:
df:29:b2:d4:fe:35:5f:7a:d1:b0:8f:80:10:05:29:ec:4c:5d:
b0:cf:8e:58:d9:2f:78:30:87:1e:3e:b4:bb:22:f7:df:a9:8b:
64:95:f6:b1:b8:7c:35:ee:67:00:81:6e:40:93:e8:36:9c:28:
4d:68:81:41:2e:fe:2c:7b:e3:1b:60:ab:f8:75:62:ee:94:ab:
83:43:2f:c1:27:5c:eb:d8:08:b5:56:ee:34:35:c7:18:cb:3e:
b3:ab:47:3d:56:ff:ac:a2:a8:ae:f3:0f:74:36:43:d1:91:d8:
c3:04:45:e9:da:af:34:34:2a:73:e4:db:d1:24:f4:c5:ff:d1:
51:b2:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:34:51 2024 by rpki-client on console.sobornost.net